Read the docs

Mrpeng

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mrpeng records in CISA KEV

No Mrpeng vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mpoperationlogs 1 record MEDIUM

Records

1 record in Mpoperationlogs · all components

TI-2023-05096 CVE-2023-5538 · GHSA-r22f-cv66-85xr

MpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting

Priority MEDIUM 40

The MpOperationLogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the IP Request Headers in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01132 Published 2023-10-18 No fix listed CWE-79
Open these records in search →